We now claim: 

1 . A method of maintaining integrity of data in a networked system having a central 
server system which is network connected to a satellite server system, said central server system 
being more strongly protected than the satellite server system, said central server system 
including master data, and said satellite server system including replicated data derived from said 
master data, the method comprising: 

determining a corruption of at least a portion of said replicated data in said 
satellite server system; and 

responsive to said determining of corruption, replacing at least said portion of said 
replicated data in said satellite server system with replacement replicated data derived from said 
master data. 

2. The method as set forth in claim 1, wherein said determining includes polling said 
satellite server system by said central server system for an integrity status of said replicated data. 

3. The method as set forth in claim 2, wherein said replacing includes sending a 
configuration record to said satellite server system, said configuration record indicating where 
said replacement replicated data is to be stored on said satellite server system. 
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4. The method as set forth in claim 2, wherein said determining a corruption of at 
least a portion of said replicated data includes sending a checking algorithm to said satellite 
server system, wherein said checking algorithm is used by said satellite server system to 
determine said integrity status of said replicated data stored on said satellite server system. 

5. The method as set forth in claim 4, wherein said determining a corruption of at 
least a portion of said replicated data further includes sending an expected result to said satellite 
server system, wherein said checking algorithm checks said integrity status of said replicated 
data by comparing said expected result to a current result of said checking algorithm. 

6. The method as set forth in claim 5, wherein said comparing said expected result to 
said current result of said checking algorithm includes comparing said expected result to a 
checksum of said replicated data. 

7. The method as set forth in claim 2, further including storing a backup copy of said 
replicated data on said satellite server system. 

8. The method as set forth in claim 7, wherein said replacing includes: 
replacing at least said portion of said replicated data from said backup copy. 

9. The method as set forth in claim 7, wherein said replacing includes: 
replacing at least said portion of said replicated data from said backup copy; and 
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subsequent to the replacing from said backup copy, replacing at least said portion 
of said replicated data with replicated data obtained from said central server system. 

10. The method as set forth in claim 2, further including logging said integrity status 
to a log file, wherein said log file provides a record of said satellite server system replicated data 
integrity. 

1 1 . The method as set forth in claim 2, further including notifying authorized users of 
said central server system when said integrity status indicates a corruption of at least a portion of 
said replicated data in said satellite server system. 

12. The method as set forth in claim 1, wherein said determining includes receiving a 
periodic status message including an integrity status of said replicated data from said satellite 
server system. 

13. The method as set forth in claim 12, wherein said replacing at least said portion of 
said replicated data includes sending a configuration record to said satellite server system, said 
configuration record indicating where said at least a portion of said master data from said central 
server system is to be stored on said satellite server system. 

14. The method as set forth in claim 12, wherein said determining a corruption of at 
least a portion of said replicated data includes sending a checking algorithm to said at least one 
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satellite server system, wherein said checking algorithm is used by said satellite server system to 
determine said integrity status of said replicated data stored on said satellite server system. 

15. The method as set forth in claim 14, wherein said determining a corruption of at 
least a portion of said replicated data further includes sending an expected result to said satellite 
server system, wherein said checking algorithm checks said integrity status of said replicated 
data by comparing said expected result to a current result of said at least one checking algorithm. 

16. The method as set forth in claim 15, wherein said comparing said expected result 
to said current result of said checking algorithm includes comparing said expected result to a 
checksum of said replicated data. 

17. The method as set forth in claim 12, further including storing a backup copy of 
said replicated data on said satellite server system. 

1 8. The method as set forth in claim 1 7, wherein said replacing includes: 
replacing at least said portion of said replicated data from said backup copy. 



19. The method as set forth in claim 17, wherein said replacing includes: 

replacing at least said portion of said replicated data from said backup copy; and 
subsequent to the replacing from said backup copy, replacing at least said portion 
of said replicated data with replicated data obtained from said central server system. 
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20. The method as set forth in claim 12, further including logging said integrity status 
to a log file, wherein said log file provides a record of said satellite server system replicated data 
integrity. 

21. The method as set forth in claim 12, further including notifying authorized users 
of said central server system when said integrity status indicates a corruption of at least a portion 
of said replicated data in said satellite server system. 

22. A system comprising: 

a user accessible data storage; 

a substantially user inaccessible data storage storing master data; and 
one or more servers performing a method including: 

deriving replicated data from the master data, 

computing a verification record indicative of the replicated data 
using a selected checking algorithm, 

storing the replicated data on the user accessible data storage as 
replicated data stored on the user accessible data storage, 

detecting corruption of said replicated data stored on the user 
accessible data storage based on the verification record, and 

repeating the storing responsive to said detecting of corruption. 
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23. The system as set forth in claim 22, wherein the one or more servers include: 

a central server communicating with the substantially user inaccessible data storage, said 
central server being protected by a firewall; and 

a satellite server communicating with the user accessible data storage, the satellite server 
being connected with the central server by a network. 

24. The system as set forth in claim 23, wherein the central server is generally 
disconnected from the network except during the storing, detecting and repeating portions of the 
method. 

25. The system as set forth in claim 22, wherein the detecting of corruption of said 
replicated data includes: 

applying the selected checking algorithm to said replicated data stored on the user 
accessible data storage; and 

comparing the result of the applying with the verification record, a difference between the 
result of the applying and the verification record being indicative of corruption of said replicated 
data stored on the user accessible data storage. 

26. A computer program product comprising a computer usable medium having 
computer readable program code embodied in said medium for use in maintaining integrity of 
data of a user-accessible satellite server, the computer readable program code comprising: 

program code for deriving replicated data from a master database; 
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program code for applying a checking algorithm to the replicated data to produce 
a verification record; 

program code for storing the replicated data on the user-accessible satellite server 
as satellite server-stored replicated data; 

program code for applying the checking algorithm to said satellite server-stored 
replicated data to produce a status record; and 

program code for producing a corrective action responsive to comparison of the 
status record and the verification record indicating a corruption of said satellite server-stored 
replicated data. 

27. The computer program product as set forth in claim 26, wherein the corrective 
action includes: 

invoking at least the program code for storing the replicated data on the 
user-accessible satellite server to re-store the replicated data on the user-accessible satellite 
server. 

28. The computer program product as set forth in claim 26, wherein the corrective 
action includes: 

producing a human-perceptible output indicating corruption of said satellite 
server-stored replicated data. 



SVL920030022US1 



24 



29. The computer program product as set forth in claim 26, wherein said program 

code for deriving replicated data from a master database includes: 

program code for retrieving data from the master database; and 

program code for modifying or reorganizing the retrieved data to produce the 

replicated data. 



30. The computer program product as set forth in claim 26, wherein the program code 
further includes: 

program code for connecting a central server supporting the master database to a 
network to enable communication between the central server and the user-accessible satellite 
server and for disconnecting the central server from the network when communication between 
the central server and the user-accessible satellite server is not being performed. 
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